chore(deps): update dependency aud to v3 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aud	^2.0.0 -> ^3.0.0

---

Release Notes

ljharb/aud (aud)

v3.0.1

Compare Source

Commits

• EOL 6236062

v3.0.0

Compare Source

Commits

• [Refactor] move entrypoint to ESM 84af24d
• [Breaking] update npm-lockfile; drop node < 16.14 72c2567
• [Refactor] replace rimraf with fs.rmSync recursive 7ba7bec
• [Deps] update tmp 517cfa1
• [Deps] update rimraf 8030e3f

v2.0.5

Compare Source

Commits

• [Dev Deps] update @ljharb/eslint-config, tape f1fd495
• [Tests] npm v10.6.0 changed its error prefix from ERR! to error af8b7f9
• [Deps] update semver, tmp 85db575
• [Fix] pin tmp to v0.2.1 due to a breaking change 27c5052
• [Deps] update semver dfd6ea9
• [Dev Deps] update tape 9549943

v2.0.4

Compare Source

Commits

• [actions] use shared rebase action 5acc88d
• [Tests] npm 9+ throws EUSAGE for a non-lockfile npm audit, now b38d220
• [Dev Deps] update npmignore, tape dcbce75
• [Fix] ensure aud works properly in workspaces 4625b24
• [Deps] update semver e9c988c
• [Deps] update semver 3d60b22

v2.0.3

Compare Source

Commits

• [Deps] update npm-lockfile, semver 0d66c3f
• [Dev Deps] update @ljharb/eslint-config, tape bc34f8c

v2.0.2

Compare Source

Commits

• [meta] use npmignore to autogenerate an npmignore file dcf2617
• [Deps] unpin pacote, update semver daecac4
• [actions] update checkout action 3c87a31

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[juliangruber]

@ljharb some tests are failing, I assume this is because aud stopped supporting older node versions?

[ljharb]

ahh yeah, i just ran into this in another project.

basically, aud 3 transitively uses a jackspeak version that breaks the install in nodes 1-5.

My hacky solution for now was to keep v2 in package.json and use npx aud@3 in the package.json script.

If there's a way to pin jackspeak in aud so that this problem is fixed, i'll definitely ship that at some point.